Cross-Domain Secure Database Access - EAL-6/PL-5 Navy SBIR FY2005.1 Sol No.: Navy SBIR FY2005.1 Topic No.: N05-083 Topic Title: Cross-Domain Secure Database Access - EAL-6/PL-5 Proposal No.: N051-083-0596 Firm: MAXIM Systems 1615 Murray Canyon Road Suite 400 San Diego, California 92108-4302 Contact: Tai Seibert Phone: (619) 574-2274 Web Site: http://www.maximsys.com Abstract: Using Phase I SBIR funding, MAXIM Systems will study methods for performing efficient Cross-Domain Secure Database Access (CDSDA). Traditionally, queries originating from higher security clearance levels rely on complete replication of a database from the lower security domain because the queries themselves could be classified in nature. This results in wasted resources to maintain numerous database copies that are often slow and out of date with respect to the original database. MAXIM will first investigate methods for speeding this process through on-demand table replication and `Query Approximation' strategies that require far less data transfer volume to the higher levels. MAXIM will then investigate methods for locking down databases that could allow these queries to be performed securely at their native security level. Finally, company engineers will build a locked down, single level prototype router system that hosts the CDSDA architecture. Option funding will then be used to begin development on a certification and accreditation plan for the system to reach EAL-6/PL-5 compliance standards in accordance with Director of Central Intelligence Directive (DCID) 6/3 requirements. Benefits: Cross-Domain Secure Database Access (CDSDA) is needed any time a higher security level user needs to query information in a database at a lower security level. While this capability would have a wide range of applications in DoD, coalition, and government environments, it is also needed in commercial industry as well. Even in single level security environments, users need methods to securely search internal and public databases that both protect the nature of their query and their identity. Commercial application areas include biotechnology and legal research for patent and copyright protection, as well as law enforcement and healthcare for confidentiality purposes. In a broader sense, the technology also applies to any industry where groups accessing common data resources need to protect their searches from others in the same organization, as may be the case with different departments in a company or university for a variety of legal and ethical reason. CDSDA technology is part of a $200 million database tools market that is projected to grow at an annual rate of 18% over the next five years. Return